WO2016184222A1

WO2016184222A1 - Failure detecting method and device

Info

Publication number: WO2016184222A1
Application number: PCT/CN2016/075655
Authority: WO
Inventors: 阚江涛
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-05-19
Filing date: 2016-03-04
Publication date: 2016-11-24
Also published as: CN106301826A

Abstract

Disclosed are a failure detecting method and device in the present invention, the method comprising : the alarm detecting instruction is used by the network administrator to detect whether the channel through which the network element device reports the failure to the network administrator fails; the network administrator judges whether the detecting information fed back by the network element device on the basis of the alarm detecting instruction is received within a predetermined time threshold; when the judging result is no, the network administrator determines that the channel fails.

Description

Fault detection method and device

Technical field

This application relates to, but is not limited to, the field of data communications.

Background technique

The Simple Network Management Protocol (SNMP) is an application layer protocol and is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol family. It enables easy exchange of management information between network devices. Enables network administrators to configure and manage the network to discover and resolve network problems. Currently, SNMP has become the most important standard in the field of network management, and is widely supported and applied. Most network management systems and platforms are based on SNMP.

The network management system manages the NE device. The NE device actively reports fault information, or the network management device monitors the NE device. If the channel that the NE is alerted to the NMS is faulty, the NMS cannot implement the device to supervise the NE. The NE cannot successfully report the alarm.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

If the NMS does not receive any packet from the NE, the device will be faulty. However, the cause of the packet failure is that the alarm reporting channel is faulty. However, the network management system fault detection method of the related technology does not involve a problem: that is, it is impossible to determine whether the network element alarm reporting channel is normal.

This document provides a fault detection method and device to solve the problem that the network management unit is not reliable.

According to an aspect of the present invention, a fault detection method is provided, including: the network management apparatus sends an alarm detection instruction to the network element device, where the alarm detection instruction is used by the network management system to detect that the network element device reports a fault to Whether the channel of the network management device is faulty; the network management device determines whether the detection information fed back by the network element device according to the alarm detection instruction is received within a preset time threshold; If the judgment result is no, the network management determines that the channel is faulty.

Optionally, the method further includes: if the determination result is yes, the network management determines that the channel is normal.

Optionally, after the network management determines that the channel is normal, the method further includes: the network tube discarding the detection information.

Optionally, the method further includes: detecting, by the network management, whether the alarm information receiving function of the network management is normal.

Optionally, the detecting, by the network management, whether the alarm information receiving function of the network management is normal includes: sending, by the network management, a detection instruction to the network card; and determining, by the network management, whether the detection sent by the network card is received within a preset time threshold If the result of the determination is yes, the network management determines that the alarm information receiving function of the network management is normal; if the determination result is negative, the network management determines that the alarm information receiving function of the network management device is faulty.

Optionally, in the case that the alarm detection command is an SNMP TRAP message, the detection information is a failure alarm, where the SNMP TRAP message is used to trigger the network element device to authenticate the failure alarm.

According to another aspect of the present invention, a fault detection apparatus is provided, the apparatus comprising: a sending module, configured to: send an alarm detection instruction to a network element device, where the alarm detection instruction is used for the network management detection The determining, by the network element device, the fault that the fault is detected on the channel of the network management device; the determining module is configured to: determine whether the detection information fed back by the network element device according to the alarm detection instruction is received within the preset time threshold; Set to: if the judgment result is no, it is determined that the channel is faulty.

Optionally, the determining module is further configured to: if the determination result is yes, determine that the channel is normal.

Optionally, the device further includes: a detecting module, configured to: detect whether the alarm information receiving function of the network management is normal.

Optionally, the detecting module includes: a sending unit, configured to: send a detection instruction to the network card; and the determining unit is configured to: determine, by the network management, whether the detection instruction sent by the network card is received within a preset time threshold The first determining unit is set to: in the case where the judgment result is yes And determining that the alarm information receiving function of the network management is normal; the second determining unit is configured to: when the determination result is negative, determine that the alarm information receiving function of the network management device is faulty.

A computer readable storage medium storing computer executable instructions for performing the method of any of the above.

According to the embodiment of the present invention, the network management device sends an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that the network element device reports the fault to the network management device is faulty; Whether the detection information fed back by the network element device according to the alarm detection instruction is received in the preset time threshold; if the determination result is negative, the network management determines that the channel is faulty, and the related technology cannot be determined. If the NE alarm reporting channel is normal, the network management system is unreliable on the NE. The network management system can check the NE reporting channel, improve the working efficiency, reduce the possibility of NE alarm loss, and improve the network management device monitoring. reliability.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a flow chart 1 of a fault detection method according to an embodiment of the present invention;

2 is a second flowchart of a fault detection method according to an embodiment of the present invention;

3 is a third flowchart of a fault detection method according to an embodiment of the present invention;

4 is a block diagram 1 of a structure of a fault detecting apparatus according to an embodiment of the present invention;

FIG. 5 is a structural block diagram 2 of a fault detecting apparatus according to an embodiment of the present invention; FIG.

6 is a structural block diagram of a detecting module of a fault detecting apparatus according to an embodiment of the present invention;

FIG. 7 is a structural block diagram of a fault detecting apparatus according to another embodiment of the present invention; FIG.

FIG. 8 is a flowchart 1 of a fault detection method according to another embodiment of the present invention; FIG.

9 is a second flowchart of a fault detection method according to another embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a detection ignore message received by the network management alarm receiving module 72 according to another embodiment of the present invention.

Embodiments of the invention

Embodiments of the present invention will be hereinafter described with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

A fault detection method is provided in this embodiment. FIG. 1 is a flowchart of a fault detection method according to an embodiment of the present invention. As shown in FIG. 1, the flow may include the following steps:

In step S100, the network management system sends an alarm detection command to the network element device, where the alarm detection command is used by the network management system to detect whether the channel that the network element device reports the fault to the network management device is faulty.

Step S102: The network management determines whether the detection information fed back by the network element device according to the alarm detection instruction is received within a preset time threshold.

Step S104: If the determination result is no, the network management determines that the channel is faulty.

Through the above steps, the network management system sends a detection command to the network element device, and the network element device feeds back the detection information according to the detection instruction. If the network management system does not receive the detection information of the feedback from the network element device in the predetermined time range, it may be determined that the network element device fails to determine whether the network element alarm reporting channel is faulty in the related art. If the network management system is unreliable on the NEs, the network management system can check the NEs to report the channels, improve the working efficiency, reduce the possibility of NE alarms, and improve the reliability of the network management.

The method may further include step S106. If the determination result is yes, the network management determines that the channel is normal. If the network management system receives the detection information fed back by the network element device within the predetermined time range, it can be considered that the alarm channel is normal and the network management system monitors the reliability of the network element device.

In an optional implementation manner, if the network management system determines that the police channel is normal, the method may further include: the network management device discarding the detection information. During the detection of whether the reported channel is faulty, the received detection information does not need to be displayed to the network management or storage. Otherwise, the customer will be misunderstood, and the device is attacked. Therefore, the network management system discards and ignores the detection information.

A fault detection method is also provided in the embodiment of the present invention, and FIG. 2 is implemented according to the present invention. Flowchart 2 of the fault detection method of the example, as shown in FIG. 2, the process may include the following steps:

Step S200: The network management system detects whether the alarm information receiving function of the network management is normal.

In step S202, the network management system sends an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that is faulty to the network management device is faulty.

Step S204: The network management determines whether the detection information fed back by the network element device according to the alarm detection instruction is received within the preset time threshold.

Step S206, in the case that the determination result is no, the network management determines that the channel is faulty;

In step S208, if the determination result is yes, the network management determines that the channel is normal.

In the case that the network management system determines that the network element device alarm reporting channel is normal, this conclusion is very clear, and the alarm receiving function detection of the network management system is not required. When the network management system determines that the alarm channel is faulty on the network element device, it cannot be determined that the alarm channel is faulty. There is also a possibility that the alarm receiving function of the network management system is faulty, and the network management system cannot receive the alarm in time. The fault detection information reported by the NE causes the network administrator to mistake the channel for a fault. In this case, the alarm receiving function of the network management system needs to be detected. The network management alarm channel detection module notifies the network management alarm receiving test module to perform network management alarm receiving detection.

Wherein, step S200 may be before step S202, or may be after step S206 or S208. When the network management function is normal, the judgment result of detecting the alarm reporting channel can be accurate. When it is determined that the police channel is faulty, the network management function is detected. If the network management alarm receiving function is normal, the alarm channel detection result is correct. When the alarm receiving function fails, it is impossible to determine whether the alarm channel is faulty.

In this embodiment, a fault detection method is provided. FIG. 3 is a flowchart 3 of a fault detection method according to an embodiment of the present invention. As shown in FIG. 3, the flow may include the following steps:

Step S300, the network management sends a detection instruction to the network card.

Step S302, the network management determines whether the detection instruction sent by the network card is received within the preset time threshold.

Step S304: If the determination result is negative, the network management determines that the alarm information receiving function of the network management device is faulty;

Step S306, in the case that the determination result is yes, the network management determines the alarm information receiving function of the network management system. Can be normal;

The detection and output commands are sent and received through the internal modules of the network management system to detect the reliability of the receiving function of the network management system.

In step S308, the network management system sends an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that is faulty to the network management device is faulty.

In step S310, the network management determines whether the detection information fed back by the network element device according to the alarm detection instruction is received within the preset time threshold.

Step S312, in the case that the determination result is no, the network management determines that the channel is faulty;

In step S314, if the determination result is yes, the network management determines that the channel is normal.

The normal operation of the network management alarm receiving function is a necessary condition for the network element alarm reporting channel detection. It only makes sense if the network management alarm receiving function is reported without problems. If the alarm receiving function of the network management system is normal, the alarm reporting channel is detected, and the alarm reporting channel is determined to be normal according to the detection result. The NMS monitors the unreliable network element and improves the reliability of the alarm management. You can find the NE alarm outage problem in time.

In an embodiment, the method may further include: the alarm detection instruction is an SNMP TRAP (trap) message, where the SNMP TRAP message is used to trigger the network element device authentication failure alarm; the detection information is an authentication failure. Alarm. SNMP Trap is a part of SNMP. When a specific event or fault occurs in the monitored segment, the agent sends an alarm event to the NMS. In the RFC 1907, an authentication failure NOTIFICATION-TYPE is defined. In this optional implementation, the alarm is used as the alarm reporting detection. The device alarm reporting channel can be detected simply and quickly. All supported SNMP (simplified network protocol) is supported. ) V1 and V2C managed devices. Test efficiency is hundreds of times more efficient than manual trigger port 宕 alarm and configuration check.

In the embodiment, a fault detecting device is also provided, which is used to implement the above-mentioned embodiments and implementation manners, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the devices described in the following embodiments are implemented in software, hardware, or a combination of software and hardware, is also possible and conceivable.

4 is a block diagram showing the structure of a fault detecting apparatus according to an embodiment of the present invention. As shown in FIG. 4, the apparatus includes a transmitting module 40, a determining module 42, and a determining module 44, which will be described below.

The sending module 40 is configured to: send an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that the network element device reports the fault to the network management device is faulty;

The determining module 42 is configured to: determine whether the detection information fed back by the network element device according to the alarm detection instruction is received within the preset time threshold;

The determining module 44 is configured to: determine that the channel is faulty if the determination result is negative.

The determining module 44 may be further configured to: determine that the channel is normal if the determination result is yes.

FIG. 5 is a block diagram showing the structure of a fault detecting apparatus according to an embodiment of the present invention, which is described in conjunction with FIG. 5.

The detecting module 50 is configured to: detect whether the alarm information receiving function of the network management is normal;

The sending module 52 is configured to: send an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that the network element device reports the fault to the network management device is faulty;

The determining module 54 is configured to: determine whether the detection information fed back by the network element device according to the alarm detection instruction is received within the preset time threshold;

The determining module 56 is configured to: determine that the channel is faulty if the determination result is negative.

As shown in FIG. 6, the detecting module 50 may further include:

The sending unit 501 is configured to: send a detection instruction to the network card;

The determining unit 502 is configured to: determine whether the detection instruction sent by the network card is received within a preset time threshold;

The first determining unit 503 is configured to: when the determination result is yes, determine that the alarm information receiving function of the network management is normal;

The second determining unit 504 is configured to: if the determination result is negative, determine that the alarm information receiving function of the network management is faulty.

Through the above device, the network management system actively sends a detection instruction to the network element device, and the network element device is configured according to The detection instruction feedback detection information. If the network management system does not receive the detection information of the feedback from the network element device in the predetermined time range, it may be determined that the network element device fails to determine whether the network element alarm reporting channel is faulty in the related art. If the network management system is unreliable on the NEs, the network management system can check the NEs to report the channels, improve the working efficiency, reduce the possibility of NE alarms, and improve the reliability of the network management.

FIG. 7 is a structural block diagram of fault detection according to another embodiment of the present invention; as shown in FIG. 7, the apparatus may implement the functions of the apparatus described in the foregoing FIG. 4 to FIG. 6, and may include the following modules:

The network management alarm channel detecting module 70 is configured to detect whether the alarm reporting channel is normal or not, and can implement the function of the determining module 42 in FIG. 4;

The network management alarm receiving module 72 is mainly responsible for monitoring the port and receiving the trap, and can implement the function of the sending module in FIG. 4;

The network management alarm receiving test module 74 is mainly responsible for generating and sending a specific trap to the network management alarm receiving port, and can implement the function of the detecting module 50 in FIG. 5;

The NE alarm test module 76 is configured to generate an authentication failure alarm and record the alarm generation time. Returning the recorded alarm generation time and device information to the alarm channel detection module, the function of the determination module 44 in FIG. 4 can be implemented;

Compared with the related art, the present embodiment provides a method and a system for quickly detecting whether an alarm reporting channel is normal. The actual test truly reflects the management status of the network management device alarm. The test-based alarm reporting method is simple, and the operation is faster than the configuration check. The check speed is faster. The alarm test does not need to modify the service on the device, and the impact on the device is smaller.

In the embodiment of the present invention, a fault detection method is provided. FIG. 8 is a flowchart 1 of a fault detection method according to another embodiment of the present invention. As shown in FIG. 8, the flow may include the following steps:

Step S800, detecting whether the network management alarm receiving is normal;

Step S802, detecting whether the alarm channel is normal on the network element.

The network management alarm receiving detection is a prerequisite for the network element alarm reporting detection. It only makes sense if the network management alarm receiving function is reported without problems. Currently, there are many types of network management problems that are known. The server port is occupied, the alarm receiving module is not started, and the firewall service exists on the network management system. The alarm on the device was intercepted; the network management server did not get enough permissions, started the exception, and so on. The alarms reported by the NEs are much more abnormal. The main reason is concentrated on the device side. This embodiment does not focus on the actual configuration of the device. It only focuses on whether the device can report traps to the NMS.

In the embodiment of the present invention, a fault detection method is provided. FIG. 9 is a flowchart 2 of a home gateway based fault detection method according to another embodiment of the present invention, and FIG. 9 is directed to the step shown in FIG. 8. S800 and step S802 are described in detail. As shown in FIG. 9, the method may include the following steps:

Step S900, the network management sends the designated TRAP to the network;

The network management alarm channel detection module 70 notifies the network management alarm receiving test module 74 to perform the network management alarm receiving function detection; the network management alarm receiving test module 74 sends the specified trap (for example, .1.3.6.1.4.1.3902.10.10.10.10) to the network.

Step S902, monitoring whether a specified TRAP is received within a specified time;

The network management alarm receiving module 70 monitors whether the network receives the specified trap within a specified time (usually 4 seconds).

In step S904, in the case of no, it is determined that the network management system receives the alarm function. If the trap message is not received within the timeout period, the network management server receives the alarm. The network management alarm channel detecting module 70 records the detection result.

In step S906, if yes, it is determined that the network management system receives the alarm function normally; if the network management alarm receiving module 70 receives the specified trap message, it indicates that the trap receiving port of the network management is available, that is, the trap monitoring is normal. The network management alarm channel detecting module 70 records the detection result.

The network management alarm channel detecting module 70 notifies the network management alarm receiving module 72 that the device authentication failure alarm is ignored in a specified time. If the authentication failure alarm generated during the test alarm reporting is displayed to the NMS or the storage device, the device will be misunderstood and the device is attacked. Therefore, the alarm receiving module 72 should be notified to discard the detected TRAP message.

The structure of the detection ignore message received by the network management alarm receiving module can be as shown in FIG. 10, which mainly includes: the network element id and the start time. When the detection of each network element trap is started, the network management alarm channel detection module adds a record to the detection queue. When the detection is completed or the detection timeout will delete the corresponding data of the queue. If the data in the queue is not empty, the alarm detection will ignore the check. Test message. And delete the corresponding detection entry from the queue.

Step S908: The network management system sends a detection packet to the network element.

The alarm channel detection module 70 notifies the network element alarm test module 76 to send a detection packet SNMP Trap; the SNMP Trap is part of the SNMP, and the agent sends an alarm event to the network management system when a specific event or fault occurs in the monitored segment. In RFC1907, an authentication failure NOTIFICATION-TYPE is defined.

Step S910, triggering the network element to generate an authentication failure alarm;

The NE alarm test module 76 triggers the NE device to generate an authentication failure alarm. If the wrong community is used to retrieve the specified mib node (that is, the snmp get operation), the device generates an authentication failure alarm. If you use errorCommunity as the community string, use the snmp get method to send the request to the value on .iso.org.dod.internet.mgmt.mib-2.system.sysDescr. If the device receives the wrong community string, an authentication failure alarm will be generated. And sending an authentication failure alarm to the network management alarm receiving module 72.

Step S912: The network management system receives an authentication failure alarm within a specified time.

When the wrong community is used to fetch the specified mib node on the device, the number of retries is usually set to 0. If it is set to multiple retry, the judgment function of the reception will be affected. After the trigger command is sent, it usually waits for about 4 seconds. If the command is sent for 4 seconds, the network administrator can confirm that it cannot be received. This time can be increased when the network is poor. Increasing the time will reduce the channel detection speed, so it needs to be adjusted according to the actual network conditions. But it is recommended not to be less than 2 seconds.

Step S914, in the case of YES, determining that the alarm channel is normal on the network element;

In step S916, in the case of NO, it is determined that the alarm channel is faulty on the network element.

The network management alarm receiving module 72, if the authentication failure packet of the test device is received within a specified time, the network management system can determine that the alarm channel is normal, and the device can record the alarm. To prevent network management and maintenance misidentification, you can discard this packet. If the authentication failure packet of the test device is not received within the specified time, the network management system can determine that the alarm channel is faulty, and the device cannot report the alarm information.

It can be used for all devices that support snmpv1 and snmpv2C by sending standard test messages. Managed equipment does not require special customization, and development and application costs are low. Use message test if set The backup alarm can be used to test a single device for less than 1 second, and the high-performance device test time can be less than 0.1 second. Test efficiency is hundreds of times more efficient than manually triggering port 宕 alarms and configuration checks. If the device is normal, the NE device can report the alarm normally. After the detection is complete, the NMS deletes the entry in the detection queue so that it does not affect the normal authentication failure. When the test is completed, the test results can be displayed to the user.

All the devices supporting SNMP (Simple Network Protocol) V1 and V2C management are supported by the method provided in this embodiment. You can quickly check whether the alarm reporting channel is normal. This can reduce the possibility of network controller alarm loss caused by the alarm being unable to be reported, and improve the reliability of the network management device monitoring.

In summary, the foregoing embodiments and implementations provide a method and a device for detecting an alarm channel, and sending a detection packet through the network management system to determine whether the detection failure information according to the detection packet is received within a preset time. The problem of determining whether the alarm channel is faulty is solved, and the problem that the network element alarm reporting channel is not normal is determined in the related art, and the network management is unreliable to the network element monitoring, so that the user can discover the network element alarm out of control and reduce the time. The possibility of the NE alarm being removed from the network improves the reliability of the network management for device monitoring.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When the device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Industrial applicability

The embodiment of the present invention solves the problem in the related art that the network element alarm reporting channel is not normal, and the network management system is unreliable to the network element. The network management system can check the network element reporting channel, improve the working efficiency, and reduce the network element alarm. The possibility of management improves the reliability of the network management for device monitoring.

Claims

A fault detection method includes:

The network management device sends an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that the network element device reports the fault to the network management device is faulty.

Determining, by the network management, whether the detection information fed back by the network element device according to the alarm detection instruction is received within a preset time threshold;

If the judgment result is no, the network management determines that the channel is faulty.
The method of claim 1 further comprising:

In the case where the determination result is yes, the network management determines that the channel is normal.
The method according to claim 2, after the network management determines that the channel is normal, the method further includes:

The network tube discards the detection information.
The method according to any one of claims 1 to 3, further comprising:

The network management system detects whether the alarm information receiving function of the network management device is normal.
The method according to claim 4, wherein the detecting, by the network management, whether the alarm information receiving function of the network management is normal comprises:

The network management system sends a detection instruction to the network card;

Determining, by the network management, whether the detection instruction sent by the network card is received within a preset time threshold;

If the judgment result is yes, the network management determines that the alarm information receiving function of the network management is normal;

If the determination result is negative, the network management determines that the alarm information receiving function of the network management device is faulty.
The method according to any one of claims 1 to 3, wherein

In the case that the alarm detection command is an SNMP TRAP message, the detection information is a failure alarm, and the SNMP TRAP message is used to trigger the network element device to authenticate the failure notification. police.
A fault detecting device is applied to a network management system, including:

The sending module is configured to: send an alarm detection command to the network element device, where the alarm detection command is used by the network management device to detect whether the channel that the network element device reports the fault to the network management device is faulty;

The determining module is configured to: determine whether the detection information fed back by the network element device according to the alarm detection instruction is received within a preset time threshold;

The determining module is configured to: determine that the channel is faulty if the determination result is negative.
The device according to claim 1, wherein

The determining module is further configured to: determine that the channel is normal if the determination result is yes.
The device according to claim 7 or 8, the device further comprising:

The detecting module is configured to: detect whether the alarm information receiving function of the network management is normal.
The apparatus of claim 9 wherein said detecting module comprises:

The sending unit is configured to: send a detection instruction to the network card;

The determining unit is configured to: determine, by the network management, whether the detection instruction sent by the network card is received within a preset time threshold;

The first determining unit is configured to: when the determination result is yes, determine that the alarm information receiving function of the network management is normal;

The second determining unit is configured to: if the determination result is negative, determine that the alarm information receiving function of the network management device is faulty.
A computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-6.